We all know that we can configure the browser, when ever we enter a password in a web form, browser prompts us asking whether we need to save it in the browser. When it happens to me in my home PC most of the time I say yes without bothering much about where it is saved or whether it is encrypted..etc..
But today I came to know that there is a serious risk in allowing the browser to save the login credentials. Specially when it is FireFox anyone who can access the system can see your passwords. All they have to do is go to,
Tools -> Options -> Security -> Show Passwords.
Try this if you were not aware about this and you will get surprised to see all your stored passwords are revealed.
Microsoft has gone one step forward by storing them encrypted in the registry, but I came to know that still there are tools like IE PassView which enable anyone to get them.
To disable this option in IE we can uncheck the ‘ Prompt me to save passwords ‘. and in Firefox it is ‘ Set Master Password ‘.
So next time be aware when you say ” Remember ” to save your passwords in the browser.
In FireFox (2.xx) – You can set a Master Password to protect all passwords you save. So noone, except one who knows the Master Password will be able to get them.
In IE – Well, I only use it when FireFox is not around. So no need to save any passwords! he he!
By: harshadewa on December 11, 2007
at 11:44 am